Open Source Vulnerabilities

mako

mako is vulnerable to Regular Expression Denial of Service

wee_alloc

wee_alloc is Unmaintained

github.com/siderolabs/talos

nftables binding to an already bound chain

github.com/talos-systems/talos

Talos vulnerable dependency due to race condition in Linux kernel's IP framework XFRM

github.com/theupdateframework/go-tuf

Go-tuf Improperly handles multiple key IDs for the same public keys in attacker-controlled metadata

typo3/cms-core, typo3/cms

TYPO3 CMS vulnerable to Denial of Service in Page Error Handling

typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms, typo3/cms

TYPO3 CMS vulnerable to User Enumeration via Response Timing

typo3/cms-core, typo3/cms-core, typo3/cms, typo3/cms

TYPO3 CMS missing check for expiration time of password reset token for backend users

typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms, typo3/cms

TYPO3 CMS Stored Cross-Site Scripting via FileDumpController

linux, linux, linux

linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia, linux-nvidia-6.2, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux-xilinx-zynqmp, linux-bluefield, linux-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

typo3/cms-core, typo3/cms-core, typo3/cms, typo3/cms

TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper

typemap

typemap is Unmaintained

traitobject

traitobject is Unmaintained

cargo, cargo

Cargo extracting malicious crates can corrupt arbitrary files

cargo, cargo

Cargo extracting malicious crates can fill the file system

vncauthproxy

VNCAuthProxy authentication bypass vulnerability

org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action

org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web

XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard

org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-platform-web

XWiki Platform Web Parent POM vulnerable to XSS in the attachment history

kernel-default, kernel-source, kernel-syms

Security update for the Linux Kernel

Improper Control of Dynamically-Managed Code Resources in budibase/budibase

hoteldruid

hoteldruid, hoteldruid, hoteldruid, hoteldruid

kernel-64kb, kernel-default, kernel-default-base, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP4_Update_3, kernel-default, kernel-default, dtb-aarch64, kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-source, kernel-syms, kernel-zfcpdump

Security update for the Linux Kernel

hoteldruid